Lucene search
+L

1036 matches found

Mageia
Mageia
added 2018/10/26 6:47 p.m.18 views

Updated blueman packages fix security vulnerability

Flawed polkit authorization checks in blueman allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authentication boo1083066...

3AI score
SaveExploits0References2
NVD
NVD
added 2018/10/17 2:29 a.m.23 views

CVE-2018-3955

An exploitable operating system command injection exists in the Linksys ESeries line of routers Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04. Specially crafted entries to network configuration information can cause execution of arbitrary system commands, resulti...

9CVSS7.3AI score0.0482EPSS
SaveExploits1References1
Prion
Prion
added 2018/10/17 2:29 a.m.25 views

Command injection

An exploitable operating system command injection exists in the Linksys ESeries line of routers Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04. Specially crafted entries to network configuration information can cause execution of arbitrary system commands, resulti...

9CVSS7.2AI score0.0482EPSS
SaveExploits1References1Affected Software2
CVE
CVE
added 2018/10/17 2:00 a.m.67 views

CVE-2018-3955

CVE-2018-3955 affects Linksys E-Series: E1200 (firmware 2.0.09) and E2500 (3.0.04). It enables OS command injection via authenticated HTTP requests to apply.cgi by passing user-controlled data (wan_domain or machine_name) that flows through nvram_set and a preinit path, eventually invoking set_ho...

9CVSS7.4AI score0.0482EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2018/10/17 2:00 a.m.43 views

CVE-2018-3955

An exploitable operating system command injection exists in the Linksys ESeries line of routers Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04. Specially crafted entries to network configuration information can cause execution of arbitrary system commands, resulti...

7.2CVSS7.3AI score0.0482EPSS
SaveExploits1References1
Talos
Talos
added 2018/10/16 12:00 a.m.548 views

Linksys ESeries multiple OS command injection vulnerabilities

Summary Multiple exploitable operating system command injections exist in the Linksys ESeries line of routers. Specially crafted entries to network configuration information can cause execution of arbitrary system commands, resulting in full control of the device. An attacker can send an...

7.9AI score
SaveExploits0
Akamai Blog
Akamai Blog
added 2018/09/06 2:49 p.m.76 views

Getting the most out of your branch local connection

In our global world of business, organizations often have multiple branch offices spanning every country. Some of these branches are quite large with their own IT infrastructure and personnel, while some are very small with just a few employees. In the past, these branch offices were connected to...

0.5AI score
SaveExploits0
Citrix
Citrix
added 2018/08/28 12:00 a.m.18 views

How to use Citrix App Layering with Fixed IP Addresses

In App Layering, the ELM needs to be able to determine which NIC device is the "active" NIC. The ELM must determine the active NIC in orderto properly merge network instances and services from different layers, howeverthere's no flag in the registry that identifies the NIC that will be used to...

7AI score
SaveExploits0
CNVD
CNVD
added 2018/08/27 12:00 a.m.10 views

Netwave IP camera information disclosure vulnerability

Netwave IP camera is a network camera produced by Netwave SystemsB.V. in the Netherlands. An information disclosure vulnerability exists in the //etc/RT2870STA.dat file in the Netwave IP camera. A remote attacker could use this vulnerability to disclose sensitive information about the network...

9.8CVSS8.8AI score0.02113EPSS
SaveExploits1References1
NVD
NVD
added 2018/08/24 9:29 p.m.29 views

CVE-2018-11653

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...

9.8CVSS9.2AI score0.02113EPSS
SaveExploits1References1
Prion
Prion
added 2018/08/24 9:29 p.m.19 views

Information disclosure

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...

5CVSS9AI score0.02113EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2018/08/24 9:00 p.m.27 views

CVE-2018-11653

Information disclosure in Netwave IP camera at //etc/RT2870STA.dat via HTTP on port 8000 allows an unauthenticated attacker to exfiltrate sensitive information about the network configuration like the network SSID and password...

9.3AI score0.02113EPSS
SaveExploits1References1
Citrix
Citrix
added 2018/08/19 12:00 a.m.15 views

Access Gateway VPN client on Windows 10

Post upgrading the PC to Windows 10 from Windows 7 Citrix Access Gateway VPN Plugin might fail with below error: Unable to manage network component. The condition can be transient. If it persists, it maybe because you're a member of the Network Configuration Operators group on this computer...

6.9AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2018/08/10 3:11 a.m.76 views

Security update for blueman (moderate)

This update for blueman fixes the following issues: The following security issue was addressed: - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without authenticatio...

2.7AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2018/08/10 12:00 a.m.22 views

openSUSE Security Update : blueman (openSUSE-2018-855)

This update for blueman fixes the following issues : The following security issue was addressed : - Fixed the polkit authorization checks in blueman, which previously allowed any user with access to the D-Bus system bus to trigger certain network configuration logic in blueman without...

5.5AI score
SaveExploits0References1
OpenVAS
OpenVAS
added 2018/08/10 12:00 a.m.14 views

openSUSE: Security Advisory for blueman (openSUSE-SU-2018:2290-1)

The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5AI score
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2018/08/08 4:13 a.m.25 views

Security Bulletin: OpenStack Heat vulnerability affect IBM Cloud Manager with OpenStack (CVE-2016-9185)

Summary IBM Cloud Manager has addressed a vulnerability in OpenStack Heat. Vulnerability Details CVE-ID: CVE-2016-9185 DESCRIPTION: OpenStack Heat could allow a remote authenticated attacker to obtain sensitive information. By using a special-crafted URL, a remote attacker could exploit this...

4.3CVSS1.1AI score0.01537EPSS
SaveExploits0Affected Software1
Packet Storm
Packet Storm
added 2018/07/22 12:00 a.m.82 views

Zoho ManageEngine 13 (13790 build) XSS / File Read / File Deletion

This issue has been reported to the vendor who has already published patches for this issue. https://www.manageengine.com/products/applicationsmanager/issues.html ========================== Advisory:Zoho manageengine Applications Manager Reflected XSSVulnerability Author: M3 From DBAppSecurity...

0.3AI score0.99293EPSS
SaveExploits7
CNVD
CNVD
added 2018/07/03 12:00 a.m.13 views

Multiple ZOHO Products Cross-Site Scripting Vulnerabilities

ZOHO ManageEngine Netflow Analyzer is a web-based bandwidth monitoring tool, and Network Configuration Manager is a suite of network configuration management, network change and configuration management NCCM software for configuring switches, routers, firewalls and other network devices. Network...

6.1CVSS6.1AI score0.99293EPSS
SaveExploits3References1
CNVD
CNVD
added 2018/07/03 12:00 a.m.11 views

Access Control Error Vulnerability in Multiple ZOHO Products

ZOHO ManageEngine Netflow Analyzer is a web-based bandwidth monitoring tool, and Network Configuration Manager is a suite of network configuration management, network change and configuration management NCCM software for configuring switches, routers, firewalls and other network devices. Network...

7.5CVSS7.4AI score0.06706EPSS
SaveExploits4References1
Rows per page
Query Builder